Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/323830343a376133303a323a3a2f34372d3437203d3e20323731333533.roa
File:                     323830343a376133303a323a3a2f34372d3437203d3e20323731333533.roa (raw, json)
Hash identifier:          47+rU68nMYvfJOYi4j6XsNMl0JodbWGxDwQNcdl1Ijg=
Subject key identifier:   D0:72:6D:B8:97:84:34:5F:08:7E:43:14:DE:73:BE:AB:B3:82:02:F6
Certificate issuer:       /CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
Certificate serial:       6A9DC3EF13B83C7111A38E142E03AEEF86CED46B
Authority key identifier: 63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/323830343a376133303a323a3a2f34372d3437203d3e20323731333533.roa
Signing time:             Thu 04 Apr 2024 20:55:46 +0000
ROA not before:           Thu 04 Apr 2024 20:50:46 +0000
ROA not after:            Thu 03 Apr 2025 20:55:46 +0000
asID:                     271353
IP address blocks:        2804:7a30:2::/47 maxlen: 47

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9d:c3:ef:13:b8:3c:71:11:a3:8e:14:2e:03:ae:ef:86:ce:d4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
        Validity
            Not Before: Apr  4 20:50:46 2024 GMT
            Not After : Apr  3 20:55:46 2025 GMT
        Subject: CN=D0726DB89784345F087E4314DE73BEABB38202F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:f9:13:ea:33:c8:89:71:3b:cc:6d:9c:68:
                    1c:db:eb:b8:95:f0:1e:89:bf:ba:4d:62:c1:d7:85:
                    ed:14:18:cd:b1:e5:6d:b0:1f:af:11:3a:1f:44:13:
                    1c:dd:75:69:8c:f1:ce:fd:6c:cd:12:47:d7:90:f9:
                    f6:09:e4:71:a0:0b:71:53:67:35:36:a0:27:d6:f5:
                    2f:ef:b2:0e:14:0e:bf:16:25:f0:41:4c:a8:68:e0:
                    ce:6c:00:59:13:c1:d9:f8:13:d1:8e:53:44:5c:80:
                    24:4d:5f:2f:cd:21:da:78:ac:49:d5:cf:bc:3c:98:
                    5d:2c:4f:3f:03:c3:92:b6:36:69:05:5e:7e:43:a0:
                    ac:51:3a:7e:1b:bb:7b:6b:6e:39:1f:3c:71:2b:86:
                    47:4d:33:a0:ec:2c:80:56:00:e3:fb:77:50:8f:86:
                    df:43:1e:a0:aa:25:c4:1a:c8:9a:c3:9a:b4:cd:50:
                    6c:c0:6c:7c:9d:15:d8:b8:55:6c:1f:4a:aa:01:b6:
                    53:06:0c:d5:f3:f1:89:33:1b:64:38:ae:03:ce:ae:
                    21:99:ce:fc:9b:3a:b4:c5:3e:ec:f2:01:83:60:e7:
                    52:b8:43:e4:92:e8:c1:76:27:11:2d:e9:c2:4d:9d:
                    4b:56:27:5a:97:f9:93:a4:e4:a5:af:42:98:d4:a9:
                    0b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:72:6D:B8:97:84:34:5F:08:7E:43:14:DE:73:BE:AB:B3:82:02:F6
            X509v3 Authority Key Identifier:
                keyid:63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/323830343a376133303a323a3a2f34372d3437203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         7f:f8:88:bd:8f:76:0c:e4:56:d5:c0:2b:93:0e:e7:2b:f1:8a:
         74:79:09:25:e7:7d:5e:db:1d:2a:bd:e1:27:58:94:b6:3e:37:
         a9:84:28:bf:13:80:ad:90:0a:cd:cf:b8:ad:4f:65:83:30:bf:
         b6:84:e3:7e:a6:0e:a8:3f:57:3b:8f:96:49:71:61:9d:57:dc:
         81:d4:4e:69:e0:68:c5:d1:ee:19:22:f4:bc:47:44:7a:26:1c:
         ae:34:c4:35:85:a3:5b:62:5d:27:16:e2:09:a8:7e:b7:31:4e:
         7b:20:98:b8:ce:60:7a:1e:8f:89:a5:10:78:4c:ce:51:0c:64:
         56:1d:59:8c:a7:0f:00:0e:76:42:5c:f6:cd:d2:1d:41:af:79:
         9f:fa:e7:49:38:8c:e4:1e:5a:06:ba:5d:dd:79:47:15:14:42:
         d0:98:d2:c6:ae:83:df:11:1c:4a:bb:27:26:49:c3:ff:64:95:
         59:d7:fa:42:eb:75:2a:8d:c4:a3:1b:db:35:e3:5b:c9:db:1b:
         7e:76:26:72:9d:a2:32:f5:c5:c4:9f:42:2a:b8:32:7b:2b:26:
         22:60:88:2e:9b:7d:4c:73:58:ca:1e:c9:a2:ff:0b:85:e8:b2:
         a5:e5:6e:4c:ac:5f:3c:c2:c4:17:0b:30:70:4e:dd:ee:e0:89:
         f6:7c:63:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----